Getting error:
" level=debug msg="Remote error https://sample-domain1-lb.sample-domain1-ns.svc.cluster.local:8080/auth. StatusCode: 404" middlewareType=ForwardedAuthType middlewareName=sample-domain1-ns-test-auth-atanu2@kubernetescrdWhere forward auth is:apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
name: test-auth-atanu2
namespace: sample-domain1-ns
spec:
forwardAuth:
address: https://sample-domain1-lb.sample-domain1-ns.svc.cluster.local:8080/auth
tls:
insecureSkipVerify: true
Similar github issue:
Tried adding two middleware forward auth, it fails for websocket. no error seen.
But passes without forwardauth
[opc@bastion-dup samples]$ kubectl describe middleware -A
Name: test-auth
Namespace: sample-domain1-ns
Labels: <none>
Annotations: <none>
API Version: traefik.containo.us/v1alpha1
Kind: Middleware
Metadata:
Creation Timestamp: 2022-11-02T05:26:23Z
Generation: 19
Managed Fields:
API Version: traefik.containo.us/v1alpha1
Fields Type: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.:
f:kubectl.kubernetes.io/last-applied-configuration:
f:spec:
.:
f:forwardAuth:
.:
f:address:
f:tls:
.:
f:insecureSkipVerify:
Manager: kubectl-client-side-apply
Operation: Update
Time: 2022-11-10T11:32:37Z
Resource Version: 16360910
UID: 15a7ebb3-9b4d-484d-9ea8-31b2cb6a011d
Spec:
Forward Auth:
Address: https://sample-domain1-lb.sample-domain1-ns.svc.cluster.local:8080/auth
Tls:
Insecure Skip Verify: true
Events: <none>
Name: test-auth-atanu3
Namespace: sample-domain1-ns
Labels: <none>
Annotations: <none>
API Version: traefik.containo.us/v1alpha1
Kind: Middleware
Metadata:
Creation Timestamp: 2022-11-15T03:41:54Z
Generation: 1
Managed Fields:
API Version: traefik.containo.us/v1alpha1
Fields Type: FieldsV1
fieldsV1:
f:metadata:
f:annotations:
.:
f:kubectl.kubernetes.io/last-applied-configuration:
f:spec:
.:
f:headers:
.:
f:customRequestHeaders:
.:
f:X-Forwarded-Proto:
Manager: kubectl-client-side-apply
Operation: Update
Time: 2022-11-15T03:41:54Z
Resource Version: 17524713
UID: c15f28bd-2669-4f28-a1a5-b06041495bc3
Spec:
Headers:
Custom Request Headers:
X - Forwarded - Proto: https
Events: <none>
Middleware
apiVersion: traefik.containo.us/v1alpha1
kind: IngressRoute
metadata:
annotations:
kubernetes.io/ingress.class: traefik
name: traefik-tls-atanu
namespace: sample-domain1-ns
spec:
entryPoints:
- websecure
routes:
- kind: Rule
match: PathPrefix(`/ws`)
middlewares:
- name: test-auth-atanu3
namespace: sample-domain1-ns
- name: test-auth-atanu2
namespace: sample-domain1-ns
services:
- kind: Service
name: sample-domain1-cluster-bea-engine-tier-clust
port: 8001
tls:
secretName: domain1-tls-cert